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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

1.-56. (canceled) 

57. (previously presented) A method of transferring 

authorization to render protected electronic content from a first device to a second 
device having a device cryptographic key, the method comprising: 

receiving a transfer authorization request having an indicator of the first 
device, an indicator of the second device, and an indicator of the protected 
electronic content; 

updating a first device history table to indicate that the first device is not 
authorized to render the protected electronic content and updating a second device 
history table to indicate that second device is authorized to render the protected 
electronic content based on the received transfer authorization request; and 

communicating a transfer authorization response having an indicator of the 
second device, an indicator of the protected electronic content, and a content 
cryptographic key for the protected electronic content protected using the device 
cryptographic key of the second device so that only the second device may gain 
access to the content cryptographic key by use of the device cryptographic key of 
the second device. 
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58. (previously presented) The method of claim 57 wherein the 
device cryptographic key of the second device is a symmetric key. 

59. (previously presented) The method of claim 58 wherein the 
device cryptographic key of the second device is a DES key. 

60. (previously presented) The method of claim 57 wherein the 
device cryptographic key of the second device is a public key having a 
corresponding private key stored with the second device, and protecting the 
content cryptographic key using the device cryptographic key of the second device 
includes protecting the content cryptographic key with the public key such that the 
second device may use the corresponding private key to gain access to the content 
cryptographic key. 

61 . (previously presented) The method of claim 60 wherein the 
public key is an RSA public key and the private key is an RSA private key. 

62. (previously presented) The method of claim 57 wherein the 
content cryptographic key is a symmetric key which is used to encrypt the 
protected electronic content such that only the symmetric key can be used to 
decrypt the content. 
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63. (previously presented) The method of claim 57 further 
comprising receiving payment authorization information associated with the 
transfer authorization request, and charging a service fee based on the payment 
authorization information. 

64. (previously presented) The method of claim 57 wherein 
updating the first device history table comprises removing a stored indicator of the 
protected electronic content from the first device history table. 

65. (previously presented) The method of claim 57 wherein 
updating the first device history table comprises adding indicia that the protected 
electronic content is no longer authorized for the first device. 

66. (previously presented) The method of claim 57 wherein the 
protected electronic content is audio content. 

67. (previously presented) The method of claim 57 wherein the 
protected electronic content is video content. 

68. (previously presented) The method of claim 57 wherein the 
protected electronic content is electronic written content. 
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69. (previously presented) The method of claim 57 wherein the 
indicator of the first device in the transfer authorization request is a unique serial 
number. 

70. (previously presented) The method of claim 57 further 
comprising verifying that the first device is authorized to render the protected 
electronic content. 

7 1 . (previously presented) A method of providing authorization to 
render protected electronic content to a second device in addition to previously 
providing authorization to render the protected electronic content to a first device, 
the method comprising: 

receiving an authorization to render request having an indicator of the first 
device, an indicator of the second device, and an indicator of the protected 
electronic content; 

updating a second device history table to indicate that the second device is 
authorized to render the protected electronic content based on the received 
authorization to render request, a first device history table indicating that the first 
device remains authorized to render the protected electronic content; and 

communicating an authorization to render response having an indicator of 
the second device, an indicator of the protected electronic content, and a content 
cryptographic key for the protected electronic content protected using a device 
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cryptographic key of the second device so that only the second device may gain 
access to the content cryptographic key by use of the device cryptographic key of 
the second device. 

72. (previously presented) The method of claim 71 wherein the 
device cryptographic key of the second device is a symmetric key. 

73. (previously presented) The method of claim 72 wherein the 
device cryptographic key of the second device is a DES key. 

74. (previously presented) The method of claim 7 1 wherein the 
device cryptographic key of the second device is a public key having a 
corresponding private key stored with the second device, and protecting the 
content cryptographic key using the device cryptographic key of the second device 
includes protecting the content cryptographic key with the public key such that the 
second device may use the corresponding private key to gain access to the content 
cryptographic key. 

75. (previously presented) The method of claim 74 wherein the 
public key is an RS A public key and the private key is an RS A private key. 
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76. (previously presented) The method of claim 71 wherein the 
content cryptographic key is a symmetric key which is used to encrypt the 
protected electronic content such that only the symmetric key can be used to 
decrypt the content. 

77. (previously presented) The method of claim 71 further 
comprising receiving payment authorization information associated with the 
authorization to render request, and charging a service fee based on the payment 
authorization information. 

78. (previously presented) The method of claim 7 1 wherein the 
protected electronic content is audio content. 

79. (previously presented) The method of claim 7 1 wherein the 
protected electronic content is video content. 

80. (previously presented) The method of claim 7 1 wherein the 
protected electronic content is electronic written content. 

81 . (previously presented) The method of claim 71 wherein the 
indicator of the first device in the authorization to render request is a unique serial 
number. 
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82. (previously presented) The method of claim 71 further 
comprising verifying that the first device is authorized to render the protected 
electronic content. 

83. (previously presented) A system of transferring authorization to 
render protected electronic content from a first device to a second device having a 
device cryptographic key, the system comprising: 

an input for receiving a transfer authorization request having an indicator of 
the first device, an indicator of the second device, and an indicator of the protected 
electronic content; 

a processor for updating a first device history table to indicate that the first 
device is not authorized to render the protected electronic content and updating a 
second device history table to indicate that second device is authorized to render 
the protected electronic content based on the received transfer authorization 
request; and 

an output for communicating a transfer authorization response having an 
indicator of the second device, an indicator of the protected electronic content, and 
a content cryptographic key for the protected electronic content protected using 
the device cryptographic key of the second device so that only the second device 
may gain access to the content cryptographic key by use of the device 
cryptographic key of the second device. 



8 



FISCHER etaL 
Application No. 09/363,413 
July 25,2005 

84. (previously presented) The system of claim 83 wherein the 
device cryptographic key of the second device is a symmetric key. 

85. (previously presented) The system of claim 83 wherein the 
device cryptographic key of the second device is a public key having a 
corresponding private key stored with the second device, and protecting the 
content cryptographic key using the device cryptographic key of the second device 
includes protecting the content cryptographic key with the public key such that the 
second device may use the corresponding private key to gain access to the content 
cryptographic key. 

86. (previously presented) The system of claim 83 wherein the 
content cryptographic key is a symmetric key which is used to encrypt the 
protected electronic content such that only the symmetric key can be used to 
decrypt the content. 

87. (previously presented) The system of claim 83 wherein the 
input receives payment authorization information associated with the authorization 
request, and the processor charges a service fee based on the payment 
authorization information. 
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88. (previously presented) The system of claim 83 wherein the 
indicator of the first device in the transfer authorization request is a unique serial 
number. 

89. (previously presented) The system of claim 83 wherein the 
processor verifies that the first device is authorized to render the protected 
electronic content. 

90. (previously presented) A system of providing authorization to 
render protected electronic content to a second device in addition to previously 
providing authorization to render the protected electronic content to a first device, 
the system comprising: 

an input for receiving an authorization to render request having an indicator 
of the first device, an indicator of the second device, and an indicator of the 
protected electronic content; 

a processor for updating a second device history table to indicate that 
second device is authorized to render the protected electronic content based on the 
received authorization to render request, a first device history table indicating that 
the first device remains authorized to render the protected electronic content; and 

an output for communicating_an authorization to render response having an 
indicator of the second device, an indicator of the protected electronic content, and 
a content cryptographic key for the protected electronic content protected using a 
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device cryptographic key of the second device so that only the second device may 
gain access to the content cryptographic key by use of the device cryptographic 
key of the second device. 

91 . (previously presented) The system of claim 90 wherein the 
device cryptographic key of the second device is a symmetric key. 

92. (previously presented) The system of claim 90 wherein the 
device cryptographic key of the second device is a public key having a 
corresponding private key stored with the second device, and protecting the 
content cryptographic key using the device cryptographic key of the second device 
includes protecting the content cryptographic key with the public key such that the 
second device may use the corresponding private key to gain access to the content 
cryptographic key. 

93. (previously presented) The system of claim 90 wherein the 
content cryptographic key is a symmetric key which is used to encrypt the 
protected electronic content such that only the symmetric key can be used to 
decrypt the content. 

94. (previously presented) The system of claim 90 wherein the 

input receives payment authorization information associated with the authorization 
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to render request, and the processor charges a service fee based on the payment 
authorization information. 

95. (previously presented) The system of claim 90 wherein the 
indicator of the first device in the transfer authorization request is a unique serial 
number. 

96. (previously presented) The system of claim 90 wherein the 
processor verifies that the first device is authorized to render the protected 
electronic content. 

97. (previously presented) A method of rendering protected 
electronic content in a second device having a device cryptographic key, the 
method comprising: 

receiving, in a first device, authorization to render the protected electronic 
content; 

communicating a transfer authorization request to transfer authorization to 
render the protected electronic content from the first device to the second device, 
the transfer authorization request having an indicator of the first device, an 
indicator of the second device, and an indicator of the protected electronic content; 

receiving a transfer authorization response having an indicator of the 
second device, an indicator of the protected electronic content, and a content 
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cryptographic key for the protected electronic content protected using the device 
cryptographic key of the second device so that only the second device may gain 
access to the content cryptographic key by use of the device cryptographic key of 
the second device; and 

obtaining access to the content cryptographic key through decryption using 
the device cryptographic key of the second device and obtaining access to the 
protected electronic content through decryption using the content cryptographic 
key. 

98. (previously presented) A method of rendering electronic content 
protected under a content cryptographic key by both a first device having a first 
device cryptographic key and a second device having second device cryptographic 
key, the method comprising: 

receiving, in the first device, authorization to render the protected electronic 
content; 

obtaining access to the content cryptographic key in the first device through 
decryption using the first device cryptographic key and obtaining access to the 
protected content through decryption using the content cryptographic key; 

communicating an authorization to render request to obtain additional 

authorization to render the protected electronic content using the second device, 

the authorization to render request having an indicator of the first device, an 

indicator of the second device, and an indicator of the protected electronic content; 
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receiving an authorization to render response having an indicator of the 
second device, an indicator of the protected electronic content, and the content 
cryptographic key for the protected electronic content protected using the second 
device cryptographic key so that only the second device may gain access to the 
content cryptographic key by use of the second device cryptographic key; and 

obtaining access to the content cryptographic key in the second device 
through decryption using the second device cryptographic key and obtaining 
access to the protected electronic content through decryption using the content 
cryptographic key. 

99. (previously presented) For use with first and second interface 
devices for insertion into at least one audio tape player having a plurality of user 
controls and for responding to user actuation of one of said controls to place the 
audio tape player in a state to initiate a selected operation when a conventional 
audio cassette has been inserted into said audio tape player, a method for 
transferring authorization to play protected audio content with the audio tape 
player from the first interface device to the second interface device, the method 
comprising: 

receiving, in the first interface device, authorization to play the protected 
audio content; 

communicating a transfer authorization request to transfer authorization to 
play the protected audio content from the first interface device to the second 
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interface device, the transfer authorization request having an indicator of the first 
interface device, an indicator of the second interface device, and an indicator of 
the protected audio content; 

receiving a transfer authorization response having an indicator of the 
second interface device, an indicator of the protected audio content, and a content 
cryptographic key for the protected audio content protected using a device 
cryptographic key of the second interface device so that only the second interface 
device may gain access to the content cryptographic key by use of the device 
cryptographic key of the second interface device; and 

obtaining access to the content cryptographic key through decryption using 
the device cryptographic key of the second interface device and obtaining access 
to the protected audio content through decryption using the content cryptographic 
key so that the audio content may be played by the audio tape player. 

100. (previously presented) For use with first and second interface 
devices for insertion into at least one audio tape player having a plurality of user 
controls and for responding to user actuation of one of said controls to place the 
audio tape player in a state to initiate a selected operation when a conventional 
audio cassette has been inserted into said player, a method of providing 
authorization to play protected audio content to the second interface device in 
addition to previously providing authorization to play the protected audio content 
to the first interface device, the method comprising: 
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receiving authorization, in the first interface device, to play the protected 
audio content; 

obtaining access to the content cryptographic key in the first interface 
device through decryption using a first device cryptographic key of the first 
interface device and obtaining access to the protected audio content through 
decryption using the content cryptographic key; 

communicating an authorization to play request to obtain additional 
authorization to play the protected audio content using a second interface device, 
the authorization to play request having an indicator of the first interface device, 
an indicator of the second interface device, and an indicator of the protected audio 
content; 

receiving an authorization to play response having an indicator of the 
second interface device, an indicator of the protected electronic content, and the 
content cryptographic key for the protected audio content protected using a second 
device cryptographic key so that only the second interface device may gain access 
to the content cryptographic key by use of the second device cryptographic key; 
and 

obtaining access to the content cryptographic key in the second interface 
device through decryption using the second device cryptographic key and 
obtaining access to the protected content through decryption using the content 
cryptographic key. 
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101 . (previously presented) The method as in claim 57 wherein the 
first and second devices are devices which may be inserted into a standard tape 
player having a plurality of conventional user controls. 

102. (previously presented) The method as in claim 71 wherein the 
first and second devices are devices which may be inserted into a standard tape 
player having a plurality of conventional user controls. 

103. (previously presented) The system as in claim 83 wherein the 
first and second devices are devices which may be inserted into a standard tape 
player having a plurality of conventional user controls. 

104. (previously presented) The system as in claim 90 wherein the 
first and second devices are devices which may be inserted into a standard tape 
player having a plurality of conventional user controls. 

105. (previously presented) The method as in claim 97 wherein the 
first and second devices are devices which may be inserted into a standard tape 
player having a plurality of conventional user controls. 
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106. (previously presented) The method as in claim 98 wherein the 
first and second devices are devices which may be inserted into a standard tape 
player having a plurality of conventional user controls. 

107. (new) The method as in claim 97 wherein the first device is no 
longer authorized to render the protected electronic content upon transfer of 
authorization to render the protected electronic content from the first device to the 
second device. 

108. (new) The method as in claim 99 wherein the first interface device 
is no longer authorized to render the protected audio content upon transfer of 
authorization to render the protected audio content from the first interface device 
to the second interface device. 
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